CVE-2008-3496

Published: Aug 6, 2008Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Buffer overflow in format descriptor parsing in the uvc_parse_format function in drivers/media/video/uvc/uvc_driver.c in uvcvideo in the video4linux (V4L) implementation in the Linux kernel before 2.6.26.1 has unknown impact and attack vectors.

Affected (1)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 2.6.26.1

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (14)

http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lkml.org/lkml/2008/7/30/655

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/31982

Source: cve@mitre.org

Third Party Advisory

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.1

Source: cve@mitre.org

Release NotesVendor Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2008:223

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/bid/30514

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/44184

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html